Methods and systems for resilient encryption of data in memory

A method for encrypting data, comprising:

• receiving, by a hypervisor, a write request, wherein the write request comprises the data, wherein the write request specifies a virtual machine address;
• performing a first lookup, in an address mapping table, to identify a memory module address of a memory module associated with the virtual machine address;
• performing a second lookup to identify an encryption key associated with the write request;
• generating an encryption request that comprises:
• the memory module address;
• and
• the encryption key;
• and
• sending the encryption request to a first node, wherein the first node comprises the memory module.

A first node, comprising:

• a memory module;
• and
• a processor, wherein the processor is configured to perform a method for decrypting data, comprising:
• receiving a read request specifying a virtual machine address associated with the memory module;
• performing a first lookup, in an address mapping table, to identify a memory module address of the memory module;
• performing a second lookup to identify an encryption key associated with the read request;
• performing a third lookup to identify a processor address associated with the memory module address;
• reading, using the processor address, encrypted data from the memory module;
• and
• decrypting the encrypted data to obtain decrypted data, wherein decrypting the encrypted data uses the encryption key and the virtual machine address.